General

  • Target

    7b753733b2b3b38a6e09c7048a6c74ed

  • Size

    4.0MB

  • Sample

    220701-wmhcbabhh9

  • MD5

    7b753733b2b3b38a6e09c7048a6c74ed

  • SHA1

    25502ec0b81ffc3c604f6ecb64db8e5c5935c3b0

  • SHA256

    385ef22e6376a88bc56460a1ce505391f2d8503b971675e34f4cbbc0ffc6bd36

  • SHA512

    a79f85c5c20f1c9813100d2983a314cc7396f83900c3a12554e9fb867cd2fcb52b0d16707d60e62724fc71f278f4b1e451c601e225f4337d89cff2e857e5c2b3

Malware Config

Targets

    • Target

      7b753733b2b3b38a6e09c7048a6c74ed

    • Size

      4.0MB

    • MD5

      7b753733b2b3b38a6e09c7048a6c74ed

    • SHA1

      25502ec0b81ffc3c604f6ecb64db8e5c5935c3b0

    • SHA256

      385ef22e6376a88bc56460a1ce505391f2d8503b971675e34f4cbbc0ffc6bd36

    • SHA512

      a79f85c5c20f1c9813100d2983a314cc7396f83900c3a12554e9fb867cd2fcb52b0d16707d60e62724fc71f278f4b1e451c601e225f4337d89cff2e857e5c2b3

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks